Is it possible to configure 2FA access to a Google account using only HW security key (e.g. Yubikey) without verification SMS code option ?
It seems that SMS confirmation code is still primary 2FA option and it cannot be disabled or removed; but what if attacker hacks my Android phone ?